Lenovo PC's and hidden phishing software

[Michael Browne]

Computer maker Lenovo has been forced to remove hidden adware that it was shipping on its laptops and PCs after users expressed anger.

 

The adware - dubbed Superfish - was potentially compromising their security, said experts.

 

According to security experts, it appears that Lenovo had given Superfish permission to issue its own certificates, allowing it to collect data over secure web connections, known in malware parlance as a man-in-the-middle attack.

 

"If someone went to, say, the Bank of America then Superfish would issue its own certificate pretending to be the Bank of America and intercept whatever you are sending back and forth," said Prof Woodward.

 

Ken Westin, senior analyst at security company Tripwire, agreed: "If the findings are true and Lenovo is installing their own self-signed certificates, they have not only betrayed their customers' trust, but also put them at increased risk."

http://www.bbc.co.uk/news/technology-31533028

 

Find out :

How to remove Superfish

Which Lenovo PC's have Superfish pre-installed

How do I know if my Lenovo PC has Superfish pre-installed

http://www.pcworld.com/article/2886278/how-to-remove-the-dangerous-superfish-adware-presintalled-on-lenovo-pcs.html